CVE-2018-16833: Improper Neutralization of Input During Web Page Generation

Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI...

PT-2018-13766

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Desktop Central version 10.0.271 Description The issue concerns an XSS vulnerability via the "Features & Articles" search field. This vulnerability is exploited through the "/advsearch.do?SUBREQUEST=XMLHTTP" URI, which is an...